CVE-2024-5091

The vulnerability CVE-2024-5091 affects the SKT Addons for Elementor WordPress plugin. It allows Stored Cross-Site Scripting via the Age Gate and Creative Slider widgets in all versions up to and including 2.0. The issue arises from insufficient input sanitization and output escaping on user-supp...

WordPress plugin SKT Addons for Elementor security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-34452 · WordPress · Skt Addons For Elementor

Name of the Vulnerable Software and Affected Versions: SKT Addons for Elementor plugin for WordPress versions up to, and including, 2.0 Description: The issue is related to Stored Cross-Site Scripting via the plugin's Age Gate and Creative Slider widgets due to insufficient input sanitization and...

CVE-2024-3288

The Logo Slider WordPress plugin before 4.0.0 does not validate and escape some of its Slider Settings before outputting them back in attributes, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2024-3288

CVE-2024-3288 affects the Logo Slider WordPress plugin (pre-4.0.0). The issue is that certain Slider Settings are not properly validated or escaped before being output in attributes, enabling Stored XSS for users with Contributor+ roles. Red Hat confirms the same description. Remediation per sour...

CVE-2024-3288 Logo Slider < 4.0.0 - Contributor+ Stored XSS

The Logo Slider WordPress plugin before 4.0.0 does not validate and escape some of its Slider Settings before outputting them back in attributes, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2024-5640

The Prime Slider – Addons For Elementor Revolution of a slider, Hero Slider, Ecommerce Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ attribute within the Pacific widget in all versions up to, and including, 3.14.7 due to insufficient input sanitization and...

CVE-2024-5640

The Prime Slider – Addons For Elementor Revolution of a slider, Hero Slider, Ecommerce Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ attribute within the Pacific widget in all versions up to, and including, 3.14.7 due to insufficient input sanitization and...

CVE-2024-5640 Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.14.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pacific Widget

The Prime Slider – Addons For Elementor Revolution of a slider, Hero Slider, Ecommerce Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ attribute within the Pacific widget in all versions up to, and including, 3.14.7 due to insufficient input sanitization and...

WordPress Prime Slider plugin <= 3.14.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pacific Widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Pacific Widget vulnerability discovered by wesley wcraft in WordPress Plugin Prime Slider – Addons For Elementor versions = 3.14.7...

PT-2024-24935 · WordPress · Logo Slider

Name of the Vulnerable Software and Affected Versions: The Logo Slider WordPress plugin versions prior to 4.0.0 Description: The issue concerns the lack of validation and escaping of certain Slider Settings in the plugin, which could allow users with the contributor role and above to perform Stor...

WordPress plugin Prime Slider security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WordPress plugin Logo Slider security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress Prime Slider – Addons For Elementor Plugin <= 3.14.7 is vulnerable to Cross Site Scripting (XSS)

Software Prime Slider – Addons For Elementor Type Plugin Vulnerable versions = 3.14.7 Fixed in 3.14.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5640 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID b8d28eb0738f Credits...

Simple AL Slider <= 1.2.10 - Reflected XSS

Description The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin 1. Add a new project 2. As an admin, access the URL:...

WordPress Slider Responsive Slideshow – Image slider, Gallery slideshow plugin <= 1.4.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Steven Julian Patchstack Alliance in WordPress Plugin Slider Responsive Slideshow – Image slider, Gallery slideshow versions = 1.4.0...

WordPress Media Slider plugin <= 1.3.9 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Steven Julian Patchstack Alliance in WordPress Plugin Media Slider – Photo Sleder, Video Slider, Link Slider, Carousal Slideshow versions = 1.3.9...

WordPress Slider Responsive Slideshow – Image slider, Gallery slideshow Plugin <= 1.4.0 is vulnerable to Broken Access Control

Software Slider Responsive Slideshow – Image slider, Gallery slideshow Type Plugin Vulnerable versions = 1.4.0 Fixed in 1.4.2 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-35722 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID...

WordPress Media Slider – Photo Sleder, Video Slider, Link Slider, Carousal Slideshow Plugin <= 1.3.9 is vulnerable to Broken Access Control

Software Media Slider – Photo Sleder, Video Slider, Link Slider, Carousal Slideshow Type Plugin Vulnerable versions = 1.3.9 Fixed in 1.4.0 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-35717 Patch priority Low CVSS severity Low 4.3 Developer Claim...

PT-2024-36811 · WordPress · The Prime Slider – Addons For Elementor

Name of the Vulnerable Software and Affected Versions: The Prime Slider – Addons For Elementor plugin for WordPress versions up to, and including, 3.14.7 Description: The issue is related to Stored Cross-Site Scripting via the id attribute within the Pacific widget due to insufficient input...